Spain crypto license 2026 — CNMV CASP authorisation
Spain's CASP licence runs through the CNMV under Royal Decree-Law 7/2025, which implements MiCA. The CNMV is the dedicated supervisor while SEPBLAC handles AML, and new entrants file against the standard Article 63 five-month clock with a real Spanish substance bar on top.
Why the CNMV is one of the more active EU CASP supervisors
Spain ran one of the largest pre-MiCA crypto-asset service-provider registers in the EU through the Banco de España, driven by retail demand and a busy fintech scene in Madrid and Barcelona. When MiCA took effect on 30 December 2024 and the CASP regime turned on, supervision shifted to the CNMV. Spain's transitional regime — set by Royal Decree-Law 7/2025 — gave pre-existing providers until 30 December 2025 to convert their registrations into a granted CASP authorisation.
That conversion pipeline kept the CNMV busy into 2026, and the agency stood up a dedicated MiCA team within its Markets directorate. By mid-2026 the steady-state regime is the live pathway — new entrants file fresh CASP applications against the standard five-month statutory clock rather than relying on any legacy register.
The CNMV's substance overlay
MiCA sets the floor for substance — actual presence in the EU, an effective management body, fit-and-proper assessment. The CNMV layers Spanish supervisory practice on top. In practice that means at least one senior manager resident in Spain and reachable for unannounced contact, a registered office in Spain (the CNMV asks for the lease and floor plan, not just a postal address), and a Spanish-speaking compliance contact fluent enough to handle supervisory dialogue without an interpreter.
These are working expectations of the CNMV's authorisation team rather than bright-line statutory rules, applied consistently with how it supervises MiFID investment firms. Files that lack them tend to draw an information request, and the local AML/CFT documentation has to be in Spanish and signed by an MLRO whose appointment SEPBLAC has acknowledged. Spain is a poor fit if the goal is the lightest-touch authorisation in the EU — Spanish substance is not free.
The five-month clock starts when the file is complete
MiCA Article 63 gives the CNMV three working days to acknowledge a filing and five months from that confirmation to grant or refuse. In Spanish practice the clock does not start until the pre-screen confirms the dossier is in order — and that pre-screen often produces an information request that resets the timeline. The checklist covers a three-year programme of operations, governance and ICT risk arrangements, the AML/CFT manual and MLRO appointment, the prudential capital position with auditor confirmation, and safeguarding arrangements for client funds and crypto-assets.
The complete-file pre-screen typically takes two to four weeks. Add Spanish translation on the front end and supervisor dialogue on the back, and a realistic end-to-end timeline is six to nine months for a clean first-time application. Once granted, the authorisation carries the EU passport: the CASP can notify the CNMV of cross-border services and begin in the host market 15 working days later under MiCA Article 65.
Spain's CASP authorisation is the licence the Comisión Nacional del Mercado de Valores (CNMV) grants under Articles 59 and 63 of MiCA Regulation (EU) 2023/1114 to crypto-asset service providers established or operating in Spain, granting EU passporting rights to all 27 member states on authorisation.
Fast facts
| Parameter | Value |
|---|---|
| Competent authority | Comisión Nacional del Mercado de Valores (CNMV), Madrid |
| Legal basis | MiCA Regulation (EU) 2023/1114 + Royal Decree-Law 7/2025 + Law 6/2023 |
| AML supervisor | SEPBLAC (Servicio Ejecutivo de la Comisión de Prevención del Blanqueo de Capitales) |
| Initial capital | €50,000 / €125,000 / €150,000 by Class 1 / 2 / 3, MiCA Annex IV |
| Statutory clock | Five months from a complete file to decision under MiCA Article 63 |
| Transitional regime | Pre-MiCA Banco de España providers had until 30 December 2025 to file a CASP application to keep operating |
| Application language | Spanish required for the application file; English working translations accepted for cross-border supporting documents |
Top counsel for Spain CASP work
Firms below are ranked according to the published CLPAI methodology. Featured selections cover firms with documented Spain engagement, regardless of where they are headquartered.
Frequently asked questions about Spain CASP authorisation
Who supervises CASP authorisation in Spain?
The CNMV is the national competent authority under MiCA. The Banco de España's pre-MiCA crypto-asset register was wound down and its supervisory scope transferred to the CNMV from 30 December 2024.
Could existing Spanish crypto providers keep operating after MiCA?
Yes, until 30 December 2025 under Spain's transitional regime, provided they had filed a CASP application by that date and were already on the Banco de España register before MiCA took effect.
Does the CNMV apply Spanish-specific substance requirements?
Yes — at least one senior manager resident in Spain, a registered office in Spain, and a fluent Spanish-speaking compliance contact. The CNMV applies these consistently with how it supervises MiFID investment firms.
How long does a Spanish CASP authorisation take in practice?
Six to nine months end-to-end for a complete first-time file. The five-month MiCA Article 63 clock starts only when the file is deemed complete, and Spanish-language preparation extends pre-filing time.
Pitfalls and nuances in Spain
1 Treating the Banco de España registration as a head-start
A pre-MiCA Banco de España registration was AML-focused under the 5AMLD transposition and does not confer MiCA authorisation. Providers on the BdE register still had to file a full CASP file — the registration only granted access to the transitional regime, not substantive credit.
2 Filing in English
Although the CNMV reads English fluently and supervisory dialogue can occur in English, the formal application must be filed in Spanish. Articles of association, governance documents, internal policies, and risk assessments need certified Spanish translations — estimate 4-6 weeks for the translation workflow alone on a substantial file.
3 Underestimating SEPBLAC AML expectations
Spain's AML supervisor, SEPBLAC, has historically applied stricter expectations than several other EU jurisdictions — particularly on beneficial-ownership documentation, source-of-wealth files for politically exposed persons, and ongoing customer due-diligence cycles. The CNMV defers to SEPBLAC on AML adequacy.
4 Localised marketing without Spanish-language consumer disclosures
Spain layers consumer-protection rules on top of MiCA's Article 66 conduct framework. The CNMV's 2023 Circular 1/2023 on crypto-asset advertising remains effective under MiCA — Spanish-language consumer disclosures are required for any service marketed in Spain, including post-passport inbound service.
Practitioners in Spain
Named lawyers from the Crypto Law Index practitioners directory whose jurisdictional coverage includes Spain. Editorial picks, sourced from public records.
Regulator and primary sources
The supervisor of CASP authorisations in Spain is Comisión Nacional del Mercado de Valores (CNMV). The legal basis is MiCA Regulation (EU) 2023/1114, transposed in Spain via Royal Decree-Law 7/2025 amending Law 6/2023. Visit www.cnmv.es/portal/MiCA/MiCA.aspx for the regulator's official guidance, application forms, and supervisory expectations.